1566875 : max-display connection closes after login

Created: 2026-01-13T14:02:28Z - current status: new

Anonymized Summary

A user reports being unable to access the Maxwell cluster via ssh @max-display.desy.de after their DESY account namespace was changed (e.g., from [OLD_GROUP] to [NEW_GROUP]). The connection fails after password and OTP input, with the error: "Connection closed by [IP_ADDRESS] port 22".

The user confirms their account is part of the new group (visible in group memberships) but suspects the namespace change may have disrupted access.

Possible Solution

  1. Verify Group Access:

  2. Ensure the new group ([NEW_GROUP]) has permissions to access max-display nodes. Some groups may require explicit whitelisting.

  3. Use Alternative Entry Points:

  4. Try connecting via max-fs-display.desy.de (recommended for Photon Science users), which does not require bastion tunneling: bash ssh [USERNAME]@max-fs-display.desy.de

  5. If using max-display, ensure the FastX client or SSH is configured correctly (e.g., port 3389 may be blocked on eduroam).

  6. Bastion Tunnel for Internal Access:

  7. If accessing internal resources (e.g., Windows drives, DESY websites), use bastion.desy.de as a jump host: bash ssh -J bastion.desy.de [USERNAME]@[TARGET_NODE]

  8. Contact Support:

  9. If the issue persists, open a ticket with the Maxwell service team (maxwell.service@desy.de) to verify account/group permissions.

Sources

  1. Troubleshooting: Connection to DESY website or Windows drives
  2. Photon Science: Remote Login / Interactive login nodes
  3. Maxwell Documentation: Interactive Login